WAAP Platform Engineer

Purview Services; Hyderabad, Pune District; Hybrid; INR 2,500,000 - 5,500,000; Full time

Job summary

Purview Services seeks an experienced WAAP/ security engineering lead to own the quality and integrity of WAAP outputs across cloud environments. You will shape standards, reference designs, and baselines, translating requirements into testable, operational solutions.

You will drive automation, define acceptance criteria for platform controls, and document decisions with risk-based reasoning. Collaboration with stakeholders across security, governance, and operations is essential.

Qualifications

• Experience engineering enterprise WAAP, WAF, API security platforms.
• Leads across complex multi-platform environments translating strategy to engineering outcomes.
• Strong understanding of web/API protocols and modern architectures.
• Defines platform standards, guardrails, documentation, and patterns.
• Experience with major WAAP/WAF technologies and deployment models.
• Knowledge of cloud, network, observability, DevSecOps principles for WAAP services.
• Proficient in automation, APIs, IaC, policy-as-code, source control, CI/CD.
• Ability to design PoCs, validate controls, and turn results into recommendations.
• Strong risk judgement within security, compliance, and governance frameworks.
• Excellent communication to influence stakeholders and teams.

Responsibilities

• Own the quality, consistency, and technical integrity of WAAP engineering outputs.
• Produce and maintain engineering standards, reference designs, and baselines.
• Translate requirements into testable, operational solutions.
• Define acceptance criteria for platform controls (security, resilience, performance).
• Promote automation and repeatability via IaC, policies, APIs, and CI/CD.
• Document technical decisions, risks, and remediation plans for exceptions.
• Coordinate discovery and evaluation of WAAP capabilities and vendor solutions.
• Use telemetry and incidents to identify platform improvements.
• Lead design reviews and communicate trade-offs to stakeholders.
• Support WAAP roadmap by identifying dependencies and technical debt.

Skills

WAAP security

WAF expertise

Cloud security

API security

Automation

CI/CD pipelines

Security governance

Technical leadership

Tools

AWS

Google Cloud

Azure

Akamai

F5

Cloudflare

Job description

Key Accountabilities

• Own the quality, consistency, and technical integrity of engineering outputs for the WAAP capability.
• Produce and maintain engineering standards, reference designs, patterns, configuration baselines, decision records, and implementation guidance.
• Ensure requirements and architecture decisions are translated into deliverable, testable, and operationally sustainable solutions.
• Define acceptance criteria and evidence for platform controls, including functional, security, resilience, performance, and efficacy outcomes.
• Promote automation and repeatability through infrastructure-as-code, policy-as-code, APIs, and CI/CD integration where appropriate.
• Assess non-standard designs and exceptions, documenting technical rationale, risks, compensating controls, ownership, and remediation or exit plans.
• Coordinate technical discovery and evaluation of new WAAP capabilities, product features, and vendor solutions.
• Use operational telemetry, incidents, tuning outcomes, engineering feedback, and threat intelligence to identify and prioritize platform improvements.
• Facilitate design reviews and technical forums, communicating decisions and trade-offs clearly to technical and non-technical stakeholders.
• Support the WAAP roadmap by identifying dependencies, technical debt, lifecycle risks, and opportunities to simplify or consolidate the platform estate.

Ideal Candidate Profile

• Demonstrable experience engineering enterprise WAAP, WAF, API security, bot management, DDoS protection, or related application-edge security platforms.
• Experience providing technical leadership across complex, multi-platform environments and translating strategy and architecture into implementable engineering outcomes.
• Strong understanding of web and API protocols, modern application architectures, common attack techniques, and layered mitigation strategies.
• Practical experience defining platform standards, reusable patterns, configuration baselines, guardrails, and technical documentation.
• Experience with several major WAAP or WAF technologies, such as AWS, Google Cloud, Azure, Akamai, F5, Cloudflare, and an understanding of their deployment and operating models.
• Knowledge of cloud, network, application delivery, identity, observability, resilience, and DevSecOps principles relevant to WAAP services.
• Experience with automation, APIs, infrastructure-as-code, policy-as-code, source control, and CI/CD pipelines.
• Ability to design and execute proofs of concept, control validation, and efficacy testing, and to turn results into clear engineering recommendations.
• Sound risk judgement with experience assessing exceptions, documenting technical decisions, and working within security, compliance, and governance frameworks.
• Strong analytical and problem-solving skills, with the ability to balance security outcomes, business needs, operability, cost, and delivery constraints.
• Excellent written and verbal communication skills, including the ability to influence architecture, capability, engineering, operations, and business stakeholders.
• A collaborative, outcome-focused approach and a commitment to continuous learning, service improvement, and engineering excellence.